PowerSTIG
4.2.0
1. Exceptions (overriding and auto-documenting)
2. Ignoring a single or entire class of rules (auto-documenting)
3. Organizational settings to address STIG rule
1. Exceptions (overriding and auto-documenting)
2. Ignoring a single or entire class of rules (auto-documenting)
3. Organizational settings to address STIG rules that have allowable ranges.
This module is intended to be used by additional automation as a lightweight portable “database” to audit and enforce the parsed STIG data.
Minimum PowerShell version
5.1
Installation Options
Owners
Copyright
Copyright 2019
Package Details
Author(s)
- Microsoft Corporation
Tags
DSC DesiredStateConfiguration STIG PowerStig
Functions
Get-DomainName Get-Stig New-StigCheckList
DSCResources
DotNetFramework FireFox IisServer IisSite InternetExplorer Office OracleJRE SqlServer WindowsClient WindowsDefender WindowsDnsServer WindowsFirewall WindowsServer
Dependencies
-
- AccessControlDsc (= 1.4.0)
- AuditPolicyDsc (= 1.2.0)
- AuditSystemDsc (= 1.1.0)
- ComputerManagementDsc (= 6.2.0)
- FileContentDsc (= 1.1.0.108)
- GPRegistryPolicyDsc (= 1.0.1)
- PSDscResources (= 2.10.0)
- SecurityPolicyDsc (= 2.4.0)
- SqlServerDsc (= 12.1.0)
- WindowsDefenderDsc (= 1.0.0)
- xDnsServer (= 1.11.0)
- xWebAdministration (= 2.5.0)
Release Notes
* Update PowerSTIG parsing for IIS 8.5 STIG - Ver 1, Rel 9: [#530](https://github.com/microsoft/PowerStig/issues/530)
* Update PowerSTIG to successfully parse Microsoft .Net Framework STIG 4.0 STIG - Ver 1, Rel 9: [535](https://github.com/microsoft/PowerStig/issues/535)
* Update PowerSTIG to successfully parse MS Internet Explorer 11 STIG - Ver 1, Rel 18: [#538](https://github.com/microsoft/PowerStig/issues/538)
* Update PowerSTIG to successfully parse Mozilla Firefox STIG - Ver 4, Rel 27: [#540](https://github.com/microsoft/PowerStig/issues/540)
* Update PowerSTIG to successfully parse Microsoft Windows 10 STIG - Ver 1, Rel 19: [533](https://github.com/microsoft/PowerStig/issues/533)
* Update PowerSTIG to parse/convert the Windows Server 2012 R2 MS/DC V2R17/V2R18 Respectively: [531](https://github.com/microsoft/PowerStig/issues/531)
* Update PowerSTIG to successfully parse Microsoft SQL Server 2016 Instance STIG - Ver 1, Rel 7: [#542](https://github.com/microsoft/PowerStig/issues/542)
* Update PowerSTIG to parse and apply OfficeSystem 2013 STIG V1R9 / 2016 V1R1: [#551](https://github.com/microsoft/PowerStig/issues/551)
* Update PowerSTIG to parse and apply Windows Server 2019 V1R2 STIG: [#554](https://github.com/microsoft/PowerStig/issues/554)
* Fixed [#428](https://github.com/microsoft/PowerStig/issues/428): Updated JRE rule V-66941.a to be a Organizational setting
* Fixed [#427](https://github.com/microsoft/PowerStig/issues/427): Windows 10 Rule V-63373 fails to apply settings to system drive
* Fixed [#514](https://github.com/microsoft/PowerStig/issues/514): Feature request: additional support for servicerule properties
* Fixed [#521](https://github.com/microsoft/PowerStig/issues/521): Organizational setting warning should include Stig name
* Fixed [#443](https://github.com/microsoft/PowerStig/issues/443): Missing cmdlet Get-StigXccdfBenchmark function
* Fixed [#528](https://github.com/microsoft/PowerStig/issues/528): New-StigChecklist should not require a ManualCheckFile
* Fixed [#545](https://github.com/microsoft/PowerStig/issues/545): Need a test to verify the conversionstatus="fail" does not exist in processed STIGs
* Fixed [#517](https://github.com/microsoft/PowerStig/issues/520): Need a test to verify the module version in the module manifest matches the DscResources.
FileList
- PowerSTIG.nuspec
- PowerStig.psd1
- PowerStig.psm1
- README.md
- LICENSE
- DSCResources\ActiveDirectory.md
- DSCResources\helper.psm1
- DSCResources\DotNetFramework\DotNetFramework.psd1
- DSCResources\DotNetFramework\DotNetFramework.schema.psm1
- DSCResources\FireFox\FireFox.psd1
- DSCResources\FireFox\FireFox.schema.psm1
- DSCResources\IisServer\IisServer.psd1
- DSCResources\IisServer\IisServer.schema.psm1
- DSCResources\IisSite\IisSite.psd1
- DSCResources\IisSite\IisSite.schema.psm1
- DSCResources\InternetExplorer\InternetExplorer.psd1
- DSCResources\InternetExplorer\InternetExplorer.schema.psm1
- DSCResources\Office\Office.psd1
- DSCResources\Office\Office.schema.psm1
- DSCResources\OracleJRE\OracleJRE.psd1
- DSCResources\OracleJRE\OracleJRE.schema.psm1
- DSCResources\Resources\firefox.ReplaceText.ps1
- DSCResources\Resources\oraclejre.KeyValuePairFile.ps1
- DSCResources\Resources\readme.md
- DSCResources\Resources\SqlServer.ScriptQuery.ps1
- DSCResources\Resources\windows.AccessControl.ps1
- DSCResources\Resources\windows.AccountPolicy.ps1
- DSCResources\Resources\windows.AuditPolicySubcategory.ps1
- DSCResources\Resources\windows.AuditSetting.ps1
- DSCResources\Resources\windows.ProcessMitigation.ps1
- DSCResources\Resources\windows.RefreshRegistryPolicy.ps1
- DSCResources\Resources\windows.Registry.ps1
- DSCResources\Resources\windows.Script.RootHint.ps1
- DSCResources\Resources\windows.Script.skip.ps1
- DSCResources\Resources\windows.SecurityOption.ps1
- DSCResources\Resources\windows.Service.ps1
- DSCResources\Resources\windows.UserRightsAssignment.ps1
- DSCResources\Resources\windows.WindowsEventLog.ps1
- DSCResources\Resources\windows.WindowsFeature.ps1
- DSCResources\Resources\windows.WindowsOptionalFeature.ps1
- DSCResources\Resources\windows.xDnsServerSetting.ps1
- DSCResources\Resources\windows.xIisLogging.ps1
- DSCResources\Resources\windows.xIisMimeTypeMapping.ps1
- DSCResources\Resources\windows.xSslSettings.ps1
- DSCResources\Resources\windows.xWebAppPool.ps1
- DSCResources\Resources\windows.xWebConfigProperty.ps1
- DSCResources\Resources\windows.xWebSite.ps1
- DSCResources\SqlServer\SqlServer.psd1
- DSCResources\SqlServer\SqlServer.schema.psm1
- DSCResources\WindowsClient\WindowsClient.psd1
- DSCResources\WindowsClient\WindowsClient.schema.psm1
- DSCResources\WindowsDefender\WindowsDefender.psd1
- DSCResources\WindowsDefender\WindowsDefender.schema.psm1
- DSCResources\WindowsDnsServer\WindowsDnsServer.psd1
- DSCResources\WindowsDnsServer\WindowsDnsServer.schema.psm1
- DSCResources\WindowsFirewall\WindowsFirewall.psd1
- DSCResources\WindowsFirewall\WindowsFirewall.schema.psm1
- DSCResources\WindowsServer\WindowsServer.psd1
- DSCResources\WindowsServer\WindowsServer.schema.psm1
- StigData\Processed\ActiveDirectory-All-Domain-2.11.org.default.xml
- StigData\Processed\ActiveDirectory-All-Domain-2.11.xml
- StigData\Processed\ActiveDirectory-All-Domain-2.12.org.default.xml
- StigData\Processed\ActiveDirectory-All-Domain-2.12.xml
- StigData\Processed\ActiveDirectory-All-Forest-2.7.org.default.xml
- StigData\Processed\ActiveDirectory-All-Forest-2.7.xml
- StigData\Processed\ActiveDirectory-All-Forest-2.8.org.default.xml
- StigData\Processed\ActiveDirectory-All-Forest-2.8.xml
- StigData\Processed\DotNetFramework-4-1.8.org.default.xml
- StigData\Processed\DotNetFramework-4-1.8.xml
- StigData\Processed\DotNetFramework-4-1.9.org.default.xml
- StigData\Processed\DotNetFramework-4-1.9.xml
- StigData\Processed\FireFox-All-4.26.org.default.xml
- StigData\Processed\FireFox-All-4.26.xml
- StigData\Processed\FireFox-All-4.27.org.default.xml
- StigData\Processed\FireFox-All-4.27.xml
- StigData\Processed\IISServer-8.5-1.7.org.default.xml
- StigData\Processed\IISServer-8.5-1.7.xml
- StigData\Processed\IISServer-8.5-1.9.org.default.xml
- StigData\Processed\IISServer-8.5-1.9.xml
- StigData\Processed\IISSite-8.5-1.8.org.default.xml
- StigData\Processed\IISSite-8.5-1.8.xml
- StigData\Processed\IISSite-8.5-1.9.org.default.xml
- StigData\Processed\IISSite-8.5-1.9.xml
- StigData\Processed\InternetExplorer-11-1.17.org.default.xml
- StigData\Processed\InternetExplorer-11-1.17.xml
- StigData\Processed\InternetExplorer-11-1.18.org.default.xml
- StigData\Processed\InternetExplorer-11-1.18.xml
- StigData\Processed\Office-Excel2013-1.7.org.default.xml
- StigData\Processed\Office-Excel2013-1.7.xml
- StigData\Processed\Office-Excel2016-1.2.org.default.xml
- StigData\Processed\Office-Excel2016-1.2.xml
- StigData\Processed\Office-Outlook2013-1.12.org.default.xml
- StigData\Processed\Office-Outlook2013-1.12.xml
- StigData\Processed\Office-Outlook2013-1.13.org.default.xml
- StigData\Processed\Office-Outlook2013-1.13.xml
- StigData\Processed\Office-Outlook2016-1.2.org.default.xml
- StigData\Processed\Office-Outlook2016-1.2.xml
- StigData\Processed\Office-PowerPoint2013-1.6.org.default.xml
- StigData\Processed\Office-PowerPoint2013-1.6.xml
- StigData\Processed\Office-PowerPoint2016-1.1.org.default.xml
- StigData\Processed\Office-PowerPoint2016-1.1.xml
- StigData\Processed\Office-System2013-1.9.org.default.xml
- StigData\Processed\Office-System2013-1.9.xml
- StigData\Processed\Office-System2016-1.1.org.default.xml
- StigData\Processed\Office-System2016-1.1.xml
- StigData\Processed\Office-Word2013-1.6.org.default.xml
- StigData\Processed\Office-Word2013-1.6.xml
- StigData\Processed\Office-Word2016-1.1.org.default.xml
- StigData\Processed\Office-Word2016-1.1.xml
- StigData\Processed\OracleJRE-8-1.5.org.default.xml
- StigData\Processed\OracleJRE-8-1.5.xml
- StigData\Processed\SqlServer-2012-Database-1.18.org.default.xml
- StigData\Processed\SqlServer-2012-Database-1.18.xml
- StigData\Processed\SqlServer-2012-Database-1.19.org.default.xml
- StigData\Processed\SqlServer-2012-Database-1.19.xml
- StigData\Processed\SqlServer-2012-Instance-1.17.org.default.xml
- StigData\Processed\SqlServer-2012-Instance-1.17.xml
- StigData\Processed\SqlServer-2012-Instance-1.19.org.default.xml
- StigData\Processed\SqlServer-2012-Instance-1.19.xml
- StigData\Processed\SqlServer-2016-Instance-1.3.org.default.xml
- StigData\Processed\SqlServer-2016-Instance-1.3.xml
- StigData\Processed\SqlServer-2016-Instance-1.7.org.default.xml
- StigData\Processed\SqlServer-2016-Instance-1.7.xml
- StigData\Processed\WindowsClient-10-1.18.org.default.xml
- StigData\Processed\WindowsClient-10-1.18.xml
- StigData\Processed\WindowsClient-10-1.19.org.default.xml
- StigData\Processed\WindowsClient-10-1.19.xml
- StigData\Processed\WindowsDefender-All-1.5.org.default.xml
- StigData\Processed\WindowsDefender-All-1.5.xml
- StigData\Processed\WindowsDefender-All-1.6.org.default.xml
- StigData\Processed\WindowsDefender-All-1.6.xml
- StigData\Processed\WindowsDnsServer-2012R2-1.11.org.default.xml
- StigData\Processed\WindowsDnsServer-2012R2-1.11.xml
- StigData\Processed\WindowsDnsServer-2012R2-1.12.org.default.xml
- StigData\Processed\WindowsDnsServer-2012R2-1.12.xml
- StigData\Processed\WindowsFirewall-All-1.6.org.default.xml
- StigData\Processed\WindowsFirewall-All-1.6.xml
- StigData\Processed\WindowsFirewall-All-1.7.org.default.xml
- StigData\Processed\WindowsFirewall-All-1.7.xml
- StigData\Processed\WindowsServer-2012R2-DC-2.17.org.default.xml
- StigData\Processed\WindowsServer-2012R2-DC-2.17.xml
- StigData\Processed\WindowsServer-2012R2-DC-2.18.org.default.xml
- StigData\Processed\WindowsServer-2012R2-DC-2.18.xml
- StigData\Processed\WindowsServer-2012R2-MS-2.16.org.default.xml
- StigData\Processed\WindowsServer-2012R2-MS-2.16.xml
- StigData\Processed\WindowsServer-2012R2-MS-2.17.org.default.xml
- StigData\Processed\WindowsServer-2012R2-MS-2.17.xml
- StigData\Processed\WindowsServer-2016-DC-1.8.org.default.xml
- StigData\Processed\WindowsServer-2016-DC-1.8.xml
- StigData\Processed\WindowsServer-2016-DC-1.9.org.default.xml
- StigData\Processed\WindowsServer-2016-DC-1.9.xml
- StigData\Processed\WindowsServer-2016-MS-1.8.org.default.xml
- StigData\Processed\WindowsServer-2016-MS-1.8.xml
- StigData\Processed\WindowsServer-2016-MS-1.9.org.default.xml
- StigData\Processed\WindowsServer-2016-MS-1.9.xml
- StigData\Processed\WindowsServer-2019-DC-1.2.org.default.xml
- StigData\Processed\WindowsServer-2019-DC-1.2.xml
- StigData\Processed\WindowsServer-2019-MS-1.2.org.default.xml
- StigData\Processed\WindowsServer-2019-MS-1.2.xml
- Module\Common\Common.psm1
- Module\Common\Function.Xccdf.ps1
- Module\Common\Functions.Helper.ps1
- Module\Rule\Rule.LoadFactory.psm1
- Module\Rule\Rule.psm1
- Module\Rule.AccountPolicy\AccountPolicyRule.psm1
- Module\Rule.AuditPolicy\AuditPolicyRule.psm1
- Module\Rule.AuditSetting\AuditSettingRule.psm1
- Module\Rule.DnsServerRootHint\DnsServerRootHintRule.psm1
- Module\Rule.DnsServerSetting\DnsServerSettingRule.psm1
- Module\Rule.Document\DocumentRule.psm1
- Module\Rule.FileContent\FileContentRule.psm1
- Module\Rule.Group\GroupRule.psm1
- Module\Rule.IISLogging\IISLoggingRule.psm1
- Module\Rule.Manual\ManualRule.psm1
- Module\Rule.MimeType\MimeTypeRule.psm1
- Module\Rule.Permission\PermissionRule.psm1
- Module\Rule.ProcessMitigation\ProcessMitigationRule.psm1
- Module\Rule.Registry\RegistryRule.psm1
- Module\Rule.SecurityOption\SecurityOptionRule.psm1
- Module\Rule.Service\ServiceRule.psm1
- Module\Rule.Skip\Skip.psm1
- Module\Rule.SqlScriptQuery\SqlScriptQueryRule.psm1
- Module\Rule.SslSettings\SslSettingsRule.psm1
- Module\Rule.UserRight\UserRightRule.psm1
- Module\Rule.WebAppPool\WebAppPoolRule.psm1
- Module\Rule.WebConfigurationProperty\WebConfigurationPropertyRule.psm1
- Module\Rule.WindowsFeature\WindowsFeatureRule.psm1
- Module\Rule.WinEventLog\WinEventLogRule.psm1
- Module\STIG\Functions.Checklist.ps1
- Module\STIG\Functions.DomainName.ps1
- Module\STIG\STIG.psm1
Version History
Version | Downloads | Last updated |
---|---|---|
4.24.0 | 874 | 12/9/2024 |
4.23.0 | 5,366 | 9/30/2024 |
4.22.0 | 8,156 | 5/31/2024 |
4.21.0 | 6,362 | 3/1/2024 |
4.20.0 | 3,031 | 1/12/2024 |
4.19.0 | 1,338 | 12/22/2023 |
4.18.0 | 3,538 | 9/5/2023 |
4.17.0 | 2,061 | 6/27/2023 |
4.16.0 | 3,384 | 3/16/2023 |
4.15.0 | 1,934 | 12/29/2022 |
4.14.0 | 2,964 | 9/14/2022 |
4.13.1 | 1,834 | 6/27/2022 |
4.13.0 | 221 | 6/16/2022 |
4.12.1 | 1,141 | 3/23/2022 |
4.12.0 | 70 | 3/18/2022 |
4.11.0 | 2,444 | 12/13/2021 |
4.10.1 | 4,754 | 8/31/2021 |
4.10.0 | 216 | 8/20/2021 |
4.9.1 | 3,271 | 6/3/2021 |
4.9.0 | 247 | 6/1/2021 |
4.8.0 | 2,561 | 3/1/2021 |
4.7.1 | 698 | 1/22/2021 |
4.7.0 | 567 | 12/17/2020 |
4.6.0 | 660 | 12/1/2020 |
4.5.1 | 893 | 10/12/2020 |
4.5.0 | 424 | 9/1/2020 |
4.4.2 | 1,192 | 7/7/2020 |
4.3.0 | 1,717 | 3/27/2020 |
4.2.0 (current version) | 1,296 | 12/20/2019 |
4.1.1 | 622 | 10/31/2019 |
4.0.0 | 693 | 9/20/2019 |
3.3.0 | 549 | 8/12/2019 |
3.2.0 | 952 | 5/25/2019 |
3.1.0 | 915 | 4/1/2019 |
3.0.1 | 186 | 3/12/2019 |
3.0.0 | 120 | 3/1/2019 |
2.4.0.0 | 3,485 | 2/7/2019 |
2.3.2.0 | 664 | 12/18/2018 |
2.3.1.0 | 220 | 12/7/2018 |
2.3.0.0 | 56 | 11/30/2018 |
2.2.0.0 | 914 | 10/10/2018 |
2.1.0.0 | 1,467 | 9/5/2018 |
2.0.0.0 | 2,713 | 8/17/2018 |
1.1.1.0 | 616 | 8/13/2018 |
1.1.0.0 | 621 | 7/29/2018 |
1.0.0.0 | 1,473 | 5/31/2018 |
0.9.3.0 | 527 | 1/8/2018 |
0.9.2.8 | 74 | 12/7/2017 |
0.9.2.7 | 89 | 11/3/2017 |